Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/bdi34NBnutAzTaFjkjCwsNug3G8.roa
File: bdi34NBnutAzTaFjkjCwsNug3G8.roa (raw, json)
Hash identifier: DjScD5hb9rVPTvbVvR7b3At8cc1Y56X+VzfeA9nq6L8=
Subject key identifier: 6D:D8:B7:E0:D0:67:BA:D0:33:4D:A1:63:92:30:B0:B0:DB:A0:DC:6F
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 019427483ECCFA49023A67867C8B919ABDC1
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/bdi34NBnutAzTaFjkjCwsNug3G8.roa
Signing time: Thu 02 Jan 2025 13:50:33 +0000
ROA not before: Thu 02 Jan 2025 13:50:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8473
IP address blocks: 192.71.5.0/24 maxlen: 24
192.121.101.0/24 maxlen: 24
193.181.65.0/24 maxlen: 24
194.71.215.0/24 maxlen: 24
194.132.162.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 07 Feb 2025 14:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:3e:cc:fa:49:02:3a:67:86:7c:8b:91:9a:bd:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 2 13:50:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6dd8b7e0d067bad0334da1639230b0b0dba0dc6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:96:56:23:a1:9c:9b:1a:a5:7d:a8:1a:7f:f9:
18:e2:8a:2e:77:28:a6:20:7d:19:90:2a:27:ab:27:
97:2e:b8:89:7b:9e:cc:05:c6:82:52:a3:4c:33:07:
dd:5d:ca:d7:da:97:3e:84:5e:38:5e:7c:58:71:60:
ff:10:30:60:c9:81:2a:27:00:19:e7:29:af:63:75:
d3:94:16:76:c0:db:0a:1b:78:31:cb:e5:18:96:b3:
2f:a3:7a:b1:b5:aa:8e:59:7c:b1:a9:44:6c:f1:64:
d2:6e:52:2e:01:d7:50:b8:b7:cd:4b:58:cc:c3:d9:
f5:32:85:a5:3a:dc:4c:ef:50:f8:4c:0c:85:5f:1f:
ce:01:36:59:26:6b:15:88:67:aa:10:ef:32:19:ea:
e3:3a:4c:25:cd:40:a0:0d:64:71:76:a3:7a:c3:bd:
e1:2a:f7:af:f3:4a:72:40:c7:f3:95:3d:36:cb:4b:
9c:11:aa:e9:7e:97:7a:87:30:18:c5:3e:3a:9d:da:
56:01:a5:17:84:e1:f1:7e:91:47:15:07:7e:62:94:
4c:e7:f9:01:08:75:24:77:35:c6:35:dc:92:01:76:
07:ac:4c:42:b2:6a:5f:c5:c4:45:61:ed:7b:4e:df:
25:e5:4a:63:0a:15:a7:82:3e:28:2b:a2:1b:33:03:
b3:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:D8:B7:E0:D0:67:BA:D0:33:4D:A1:63:92:30:B0:B0:DB:A0:DC:6F
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/bdi34NBnutAzTaFjkjCwsNug3G8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.71.5.0/24
192.121.101.0/24
193.181.65.0/24
194.71.215.0/24
194.132.162.0/24
Signature Algorithm: sha256WithRSAEncryption
39:e5:94:82:c0:81:1f:84:59:ea:43:67:72:ef:a2:42:ba:34:
f3:b1:0b:d4:85:2d:11:f2:74:30:e2:8d:39:82:8b:0c:ec:03:
71:23:43:f6:6a:f9:61:e8:76:83:d4:c0:ab:a6:de:7c:1f:54:
6d:8c:e3:7d:35:72:5c:95:15:71:93:64:ff:6b:70:44:0d:93:
94:e5:ec:89:ad:0c:b3:fd:76:f3:de:25:5d:f1:dd:ef:dc:9e:
d1:7d:c1:ef:8a:31:01:40:99:e6:66:23:68:f2:e4:07:49:0e:
69:9a:4c:3d:98:11:6f:06:ca:a6:20:19:07:14:e4:2a:3c:c6:
b0:7e:5f:ae:ae:24:a7:26:36:fc:ad:4a:bd:3e:28:aa:b5:99:
6e:f6:37:6f:9d:13:73:06:39:4e:17:d2:d6:3e:0d:6c:b8:1b:
e2:8b:63:c9:32:45:ed:fd:25:d5:f1:4a:70:38:00:3a:84:f7:
a3:8b:06:92:d8:56:cc:ad:10:f1:7e:11:dd:01:01:35:77:d7:
7e:b7:7c:9b:03:65:7e:db:95:fd:55:60:02:1d:79:57:30:01:
ef:d8:cb:ff:3f:a4:d1:a5:29:06:47:6f:2d:7d:be:99:15:f1:
c0:7f:32:53:3b:a4:d0:bf:89:27:6e:68:ec:ff:de:73:45:cb:
b4:6e:7c:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:03:53 2025 by rpki-client